CVE-2008-2060: High severity cisco intrusion prevention system vulnerability

Published Jun 18, 2008

Updated

Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a "specific series of jumbo Ethernet frames."

Affected Software

2 affected components

Cisco Intrusion Prevention System=5.1

Cisco Intrusion Prevention System=6.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtml

Event History

Jun 18, 2008

CVE Published

via MITRE·07:29 PM

Data Sourced

via MITRE·07:29 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2060?

CVE-2008-2060 is considered a high severity vulnerability due to its potential to cause denial of service and bypass network traffic restrictions.

How do I fix CVE-2008-2060?

To fix CVE-2008-2060, upgrade your Cisco Intrusion Prevention System to version 5.1(8)E2 or 6.0(5)E2 or later.

What versions of Cisco Intrusion Prevention System are affected by CVE-2008-2060?

CVE-2008-2060 affects Cisco Intrusion Prevention System versions 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2.

What impact can CVE-2008-2060 have if exploited?

Exploitation of CVE-2008-2060 can result in a denial of service condition leading to a system panic and potential unauthorized access.

Is there a workaround available for CVE-2008-2060?

There are no documented workarounds for CVE-2008-2060; upgrading to the patched version is the recommended solution.